Hello! Welcome back to our module on Intellectual Property Strategy.
In the previous lesson, we focused on how corporations take ownership of intellectual property through assignment agreements. We saw that for IP like patents and copyrights, the key is to ensure legal title is transferred from the creator to the company.
Today, we shift our focus to a unique and often highly valuable category of IP: information that is protected not by registration, but by secrecy. Your customer lists, secret formulas, or proprietary software code can be your company's crown jewels, and losing control of them can be catastrophic.
Your learning outcome for this lesson is to: Evaluate strategies for protecting corporate trade secrets, including the use of non-disclosure agreements (NDAs).
We will first define what legally constitutes a trade secret, then explore the comprehensive set of strategies—legal, technical, and procedural—that a company must implement to protect them. A major part of our focus will be on the Non-Disclosure Agreement (NDA), a cornerstone legal document in any trade secret protection plan.
1. What is a Trade Secret?
Unlike patents or trademarks, which are registered with a government office, a trade secret is a form of intellectual property that has no formal registration process. Its entire value and legal protection stem from it being kept secret.
To be considered a trade secret, information must generally meet three criteria:
- It is not generally known or reasonably ascertainable by the public.
- It confers some sort of economic value or business advantage on its holder from not being generally known.
- The holder takes reasonable steps to maintain its secrecy.
To get a clear picture of what this means in practice, let's watch a short video.
Intellectual Property Law Explained | Copyrights, Trademarks, Trade Secrets, & Patents
The video 'Intellectual Property Law Explained' by Attorney Aiden Durham provides a concise overview of the four main types of IP. We will focus on the section defining trade secrets and how they are protected.
Please watch from 07:01 to 10:11. As you watch, pay attention to the examples given (like the Coca-Cola formula) and the core requirements: the information must provide economic value and, most importantly, it must be kept secret through 'reasonable steps'.
As the video emphasizes, the moment a trade secret becomes public knowledge, it loses its status as a trade secret—and its legal protection. This is why the "reasonable steps" to maintain secrecy are so critical. These steps are not just a single action but a comprehensive corporate strategy.
2. A Multi-Layered Protection Strategy
Protecting trade secrets requires more than just locking a formula in a vault. A corporate lawyer's role is to help the business build a robust, multi-layered defense system. We can think of these strategies in four key areas.
a) Identification and Policy Development
You can't protect what you don't know you have. The first step is to conduct an audit to identify the company's trade secrets and distinguish them from other "confidential information" or general employee "know-how." Once identified, the company must create a formal trade secrets policy. This policy becomes the backbone of the entire protection program.
b) Operational and Technical Controls
These are the practical measures taken to keep the secret, well, secret. They serve as crucial evidence that the company is taking "reasonable steps."
- Access Control: Restricting access to the information on a "need-to-know" basis. Not every employee needs to see the secret algorithm or the master client list.
- Physical Security: Using locked file cabinets, secure-access labs, or other physical barriers.
- Digital Security: Employing password protection, encryption, secure servers, and monitoring network access to prevent unauthorized copying or transmission of data. Documents containing trade secrets should be marked "CONFIDENTIAL."
c) Human Resources Procedures
Employees are often the biggest risk to trade secrets, whether through intentional theft or accidental disclosure. A solid strategy involves the entire employee lifecycle.
- On-boarding: New hires who will have access to trade secrets should receive training on the company's IP policy and sign agreements (like NDAs and PIIAs, which we discussed previously).
- Training: Regular training sessions reinforce the importance of confidentiality and remind employees of their obligations. This helps build a culture of security.
- Off-boarding: Exit interviews should remind departing employees of their ongoing confidentiality obligations. The company should also have a process to immediately revoke access to all systems and ensure the return of all company property (laptops, phones, etc.).
d) Contractual Protection
This is where the legal agreements come in. Whenever a company needs to share a trade secret with a third party—an employee, a contractor, a potential business partner, or an investor—it must use a legal instrument to bind that party to secrecy. The primary tool for this is the Non-Disclosure Agreement (NDA).
The article "Trade secret tactics: 10 strategies for in-house counsel" provides a good overview of these combined strategies. While you don't need to read it in full, it reinforces the idea that NDAs are just one part of a much broader strategic plan involving policies, IT security, and employee management.
3. Deep Dive: The Non-Disclosure Agreement (NDA)
An NDA (also known as a confidentiality agreement) is a legally binding contract that establishes a confidential relationship. The party or parties signing the agreement agree that sensitive information they may obtain will not be made available to any others.
An NDA is the most direct way a company demonstrates it is taking "reasonable steps" to protect its secrets when disclosure to others is necessary. Let's break down its key components.
A well-drafted NDA is the corporate lawyer's first line of defense. However, its effectiveness depends entirely on its specific wording. Let's examine some of the most critical drafting considerations.
Non-Disclosure Agreements and Trade Secrets: 12 Points to Consider
The article 'Non-Disclosure Agreements and Trade Secrets: 12 Points to Consider' from the law firm Holland & Knight provides an excellent, in-depth look at the nuances of drafting effective NDAs. We will focus on a few key points that highlight the agreement's function and potential pitfalls.
Please read the following points from the article: Point 1: Focus on how an NDA can protect information that might not legally qualify as a trade secret. Point 2: Understand the three different approaches to defining the confidential information covered by the NDA. Points 6 & 7: Pay close attention to how an NDA can be a 'double-edged sword' and why the duration of the agreement is so important.
Let's synthesize the key takeaways from that reading:
1. Defining "Confidential Information": This is arguably the most important clause.
- As Point 1 explains, an NDA can be drafted to protect a broad category of "confidential and proprietary information," which includes trade secrets but is not limited to them. This gives the company contractual protection over sensitive business information even if a court later finds it doesn't meet the strict legal test for a trade secret.
- Point 2 highlights a critical trade-off: a broad, general definition is flexible but can be harder to enforce, while a highly specific definition is easier to enforce but inflexible. The choice depends on the context of the business relationship.
2. Duration of Confidentiality:
- As Point 7 states, the duration of the non-disclosure obligation should match the expected life of the information. For a trade secret with perennial value (like the Coke formula), the NDA should ideally have an indefinite or very long term. If the NDA has an expiration date, the contractual obligation to keep the information secret could end, jeopardizing the trade secret status itself.
3. The NDA as a "Double-Edged Sword":
- The Sword: Having a signed NDA is strong evidence that you consider the information secret and took reasonable steps to protect it.
- The Other Edge: If you fail to follow the terms of your own NDA, it can be used against you. For example, if your NDA requires that all confidential documents be marked "CONFIDENTIAL" and you fail to do so, a defendant can argue that you didn't treat the information as a secret, and the trade secret claim could fail. This shows that an NDA isn't a "sign it and forget it" document; it must be integrated with the company's actual business practices.
Here is an example of what the core of an NDA looks like in practice.
Test your understanding!
A software company, "CodeCo," has developed a proprietary algorithm for data compression. They are entering into talks with a large tech firm, "MegaCorp," for a potential partnership. CodeCo needs to disclose the algorithm to MegaCorp's technical team for evaluation. You are advising CodeCo.
What are three key provisions you would insist on including in the NDA with MegaCorp to best protect CodeCo's algorithm as a trade secret?
Show answer
Based on our lesson, here are three critical provisions:
- A Precise Definition of Confidential Information: While a broad definition can be useful, in this case, the NDA should specifically identify the "proprietary data compression algorithm" and any related source code, documentation, and performance data as Confidential Information. This leaves no room for ambiguity.
- A Perpetual or Long-Term Duration: The algorithm's value will likely last for many years. The NDA's confidentiality obligation should be perpetual or at least last for a very long period (e.g., 10+ years), rather than a short term like 1 or 2 years, to ensure the protection doesn't prematurely expire.
- Strict Use Limitation and a No-Reverse-Engineering Clause: The NDA must explicitly state that MegaCorp can only use the algorithm for the "sole purpose of evaluating a potential partnership" and for no other reason. It should also include a clause explicitly prohibiting MegaCorp from attempting to reverse engineer, decompile, or otherwise derive the underlying mechanics of the algorithm.
Conclusion
Today we've seen that protecting a company's most valuable secrets is an active, ongoing process. It relies on a combination of operational diligence and carefully drafted legal agreements. As a corporate lawyer, your role is not just to write an NDA, but to help the business build and maintain a comprehensive protection strategy.
Key Takeaways:
- A trade secret is valuable information that is protected by keeping it secret through "reasonable efforts."
- Protecting trade secrets requires a multi-layered strategy that includes identifying secrets, implementing technical and physical security, managing employee access, and using legal contracts.
- The Non-Disclosure Agreement (NDA) is the primary legal tool used to create a contractual obligation of confidentiality when sharing secrets with third parties.
- An effective NDA must carefully define the confidential information, set an appropriate duration for the secrecy obligation, and specify the permitted uses of the information.
- An NDA is only as good as a company's adherence to it. Failing to follow your own rules can undermine the very protection you seek to create.
Preview of the Next Lesson:
We've covered IP that is created (copyrights), assigned (inventions), and hidden (trade secrets). In our next lesson, we turn to the public face of the company's brand. We will evaluate legal strategies for protecting corporate trademarks against infringement and dilution, exploring how companies build and defend the names and logos that represent their goodwill in the marketplace.